Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
File: 322e35362e3235322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: S+v5CFDtItQDRvHHSXjVewgnAqOqHyduysHhNF7iJas=
Subject key identifier: 31:10:BE:56:11:96:48:31:B6:7A:0B:7B:8A:5F:07:05:70:F7:A2:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C9B56BAFEC4A9D39B8C582FF1C9596E13601D88
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 03 Sep 2026 15:28:32 +0000
ROA not before: Thu 03 Sep 2026 15:23:32 +0000
ROA not after: Thu 02 Sep 2027 15:28:32 +0000
asID: 136787
IP address blocks: 2.56.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9b:56:ba:fe:c4:a9:d3:9b:8c:58:2f:f1:c9:59:6e:13:60:1d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 3 15:23:32 2026 GMT
Not After : Sep 2 15:28:32 2027 GMT
Subject: CN=3110BE5611964831B67A0B7B8A5F070570F7A2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:1d:b4:00:3a:2d:ef:b9:f7:3b:be:49:67:
81:31:fe:a8:6d:fa:0d:eb:6d:12:51:00:7a:f6:ef:
e9:f1:03:90:10:69:e1:37:0d:83:cc:cc:9c:b0:23:
08:9d:f5:d5:61:1c:d6:e0:13:87:6d:0e:c8:11:67:
b7:04:1a:c0:32:d4:0a:4b:d9:a8:72:ad:3e:17:a2:
17:03:8a:8d:db:47:0d:0d:28:53:bb:ee:14:e3:6a:
0b:27:b2:0a:29:c0:31:94:34:6a:81:8a:be:b5:61:
5f:36:84:ca:b8:51:67:92:c0:7c:ed:6c:f6:08:f4:
7e:9e:9a:53:f1:e4:33:89:33:23:77:d4:1c:15:23:
61:94:86:06:8b:50:a6:67:3c:f5:93:7d:e8:dc:6b:
3b:f2:c9:05:d2:24:c9:01:50:2a:ac:33:5f:71:7e:
86:4f:4c:69:aa:63:99:21:39:bd:b3:47:46:f0:d6:
ce:12:8b:c4:76:a9:51:1b:94:e0:83:9d:a9:8f:79:
f2:06:fe:e1:f8:0d:62:38:82:55:73:69:20:c2:73:
43:c0:59:31:2e:dd:5b:2e:80:08:3d:6f:23:8e:c2:
d8:85:43:84:b3:c9:b9:04:cf:e9:d5:27:37:f9:35:
74:d1:45:71:d2:44:82:11:cd:5f:0a:6a:2f:46:90:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:BE:56:11:96:48:31:B6:7A:0B:7B:8A:5F:07:05:70:F7:A2:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.252.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3c:ab:b7:27:68:2e:ca:d3:55:38:35:54:ce:34:25:82:98:
35:c5:d8:de:73:57:fc:92:b1:f7:a6:6d:15:99:5e:50:47:03:
81:46:9a:66:7f:d0:e1:95:10:c3:61:37:2b:69:f8:8c:19:00:
c9:80:1c:b8:ca:c2:3c:2c:b8:41:89:d3:ed:0a:fc:86:01:1e:
79:65:5f:9a:3c:f5:ab:8d:86:c1:d4:51:33:e4:ae:bf:b4:d2:
ea:1f:71:ef:ee:e5:dc:84:79:b2:fb:92:f1:22:6d:da:6d:09:
6f:14:8f:e3:6c:6d:04:fb:26:35:d1:d8:dc:6e:ad:2a:13:8a:
2c:ff:b3:57:31:06:dd:e5:13:ad:34:eb:7d:38:26:6f:1f:89:
bd:e7:cb:60:41:ae:5b:b3:82:81:79:86:99:9e:a6:d7:cc:3f:
fa:3f:7d:81:ce:0c:cc:9e:1e:c1:50:27:f7:d2:c3:49:3f:1a:
71:7e:9d:fd:6c:e0:ff:ec:ab:17:83:99:2e:05:73:e3:c0:c7:
0e:18:36:bd:d1:5c:50:cd:3a:52:89:c1:41:07:d8:52:cf:37:
b4:4d:16:ff:29:ff:54:47:8c:0f:a1:9d:30:f6:61:af:fb:29:
47:8a:0b:27:3e:6e:5b:b8:d6:24:00:cf:b0:e6:9e:a1:40:a2:
47:e1:94:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUDJtWuv7EqdObjFgv8clZbhNgHYgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNjA5MDMxNTIzMzJaFw0yNzA5MDIxNTI4MzJaMDMxMTAvBgNV
BAMTKDMxMTBCRTU2MTE5NjQ4MzFCNjdBMEI3QjhBNUYwNzA1NzBGN0EyRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEh20ADot77n3O75JZ4Ex/qht
+g3rbRJRAHr27+nxA5AQaeE3DYPMzJywIwid9dVhHNbgE4dtDsgRZ7cEGsAy1ApL
2ahyrT4XohcDio3bRw0NKFO77hTjagsnsgopwDGUNGqBir61YV82hMq4UWeSwHzt
bPYI9H6emlPx5DOJMyN31BwVI2GUhgaLUKZnPPWTfejcazvyyQXSJMkBUCqsM19x
foZPTGmqY5khOb2zR0bw1s4Si8R2qVEblOCDnamPefIG/uH4DWI4glVzaSDCc0PA
WTEu3VsugAg9byOOwtiFQ4SzybkEz+nVJzf5NXTRRXHSRIIRzV8Kai9GkDH9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUMRC+VhGWSDG2egt7il8HBXD3ovYwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzIyZTM1MzYyZTMyMzUzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4
/DANBgkqhkiG9w0BAQsFAAOCAQEAmTyrtydoLsrTVTg1VM40JYKYNcXY3nNX/JKx
96ZtFZleUEcDgUaaZn/Q4ZUQw2E3K2n4jBkAyYAcuMrCPCy4QYnT7Qr8hgEeeWVf
mjz1q42GwdRRM+Suv7TS6h9x7+7l3IR5svuS8SJt2m0JbxSP42xtBPsmNdHY3G6t
KhOKLP+zVzEG3eUTrTTrfTgmbx+JvefLYEGuW7OCgXmGmZ6m18w/+j99gc4MzJ4e
wVAn99LDST8acX6d/Wzg/+yrF4OZLgVz48DHDhg2vdFcUM06UonBQQfYUs83tE0W
/yn/VEeMD6GdMPZhr/spR4oLJz5uW7jWJADPsOaeoUCiR+GU0w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:28 2026 by rpki-client